
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
File: jY0mWIFco8TuWlP5G6YSaOP0wOE.mft (raw, json)
Hash identifier: PlUfw5k1CLHwHUPHPb3JJZHCki7UizxuoDjcSawi0ok=
Subject key identifier: 6A:DB:D1:49:45:07:5B:29:4E:A6:E3:FF:E2:2D:C6:11:98:AC:67:58
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial: 4C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
Manifest number: 08F9
Signing time: Wed 05 Nov 2025 18:29:29 +0000
Manifest this update: Wed 05 Nov 2025 18:29:29 +0000
Manifest next update: Thu 20 Nov 2025 18:29:29 +0000
Files and hashes: 1: 75VGgB-vDeK9hj3YvzivGamLti8.roa (hash: NwgLj6ghgKYzYbQyOAg+qpIim+Jl89l8iO9FPGhCKzc=)
2: 88KZBtS7bsmWCDVnYBuBWyON4EU.roa (hash: jOwUVHLNtMC1m/imqxAGkQ//ypuNmv7Iv0KAVZt7MP0=)
3: Bm-MH-uer-pFCgGfIpCX9-2zvGY.roa (hash: cTCZZwV2AVpvzkKKoX+fIsSeXj6nlsFghzM3bMdAjGU=)
4: UE_6oiq6bA2xuPiUl5cSVlOBoNU.roa (hash: cnuvJxbrJehd70UAjMxQH1DqRpN7zI7AYb6cM5HUlw0=)
5: VmwVEdKzBIU0qLkBfeDg5f_UMvs.roa (hash: mf9wMWwNQhw+YYPrLIlwiQGRKg1wXQIvj3aVE2STOd0=)
6: Xh5dF9I8BTma9KSokNlAJzhM1fw.roa (hash: RaocUQr3rhFGZeXHvI9SX8tHn7sq0Xe6dj7CX6E5P28=)
7: gakL-QE1u-CG170F0ufqULiAOBw.roa (hash: WIL+EPwfgGZwDluEle4i5FBU7Uzpfy2zba44MjGx7Zg=)
8: jY0mWIFco8TuWlP5G6YSaOP0wOE.crl (hash: iAwTea77vHCV4irpeizKI5LFHCtt4Q96quJ0tFHcR18=)
9: vNH-pC6vSc0Y8rF91m2V4X4evrY.roa (hash: 8t7DXcRn7cC92fiK/RuRXZw16Y9dmN37nUBNgUyDZpA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Validity
Not Before: Oct 15 01:37:00 2025 GMT
Not After : Oct 15 01:30:02 2026 GMT
Subject: CN=6ADBD14945075B294EA6E3FFE22DC61198AC6758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:48:33:98:60:18:14:09:e5:8b:f6:64:e4:
4c:ec:81:34:a9:02:f7:56:9c:c4:96:3a:f7:78:f7:
d8:69:85:8a:9a:e3:eb:28:32:62:6a:f3:67:9f:17:
1a:40:ca:f9:82:c5:68:92:47:2c:0d:a4:3e:18:ad:
3f:d9:69:8e:0a:da:ac:1b:89:dc:01:ec:67:8c:c1:
e4:17:fa:b2:8e:e5:e1:49:5d:6d:cd:27:25:37:60:
a4:5b:74:3b:a2:05:62:44:72:77:e6:af:49:45:e2:
a4:b0:87:b5:14:28:19:0c:a2:fe:a3:ad:ac:e9:8e:
d8:00:a5:f7:b9:d0:30:64:97:bc:f0:7b:95:60:aa:
77:85:c5:1d:31:f2:d9:e8:ef:c3:44:4b:79:42:03:
7b:87:93:c7:52:6a:9d:d6:99:41:8e:86:cc:a5:f0:
d9:db:1f:92:24:5f:9c:99:fd:d6:42:a6:b2:9f:79:
d7:6a:93:64:37:ea:3d:b2:48:71:b1:e2:9a:aa:b1:
fb:b6:c2:ec:56:d6:72:4a:78:0e:74:c5:d8:35:38:
b3:e4:99:a2:ea:5e:58:0e:80:a1:1d:e7:bf:38:6b:
59:de:0a:f7:46:de:28:5d:1a:85:b8:07:e6:ae:88:
dd:1a:f0:cf:40:b8:90:fd:9f:8b:ad:e0:f5:bb:9c:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DB:D1:49:45:07:5B:29:4E:A6:E3:FF:E2:2D:C6:11:98:AC:67:58
X509v3 Authority Key Identifier:
keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0b:13:9b:f3:f6:e1:2c:53:75:60:4a:19:d3:16:b2:40:66:
b2:8e:5e:60:ce:84:1f:5a:73:40:78:4e:d9:77:d1:2a:a8:ff:
37:33:cf:74:7a:7f:c3:bc:54:ba:72:ad:38:c5:4c:9c:91:42:
e4:26:08:07:d3:92:18:a8:50:b7:9b:8b:55:b6:31:c3:c7:b2:
0c:00:3d:c7:05:5e:d9:0b:96:3f:ef:ef:14:7d:29:52:93:3c:
a2:3a:ba:a7:ae:68:35:09:3f:9c:67:9f:28:63:ac:3d:ce:ec:
52:3a:c6:a0:77:00:b9:48:34:c2:2d:7b:e4:51:41:75:a4:5f:
77:41:5d:41:10:0e:95:2d:3f:63:53:13:3c:62:7d:1d:94:af:
e8:6a:93:75:cc:e4:95:81:ac:29:93:0d:5d:bb:ee:d2:6c:fe:
13:95:18:35:82:99:5f:1c:0d:16:3d:6a:1c:f7:bd:ed:fa:32:
97:ec:bc:d1:33:6f:a7:52:0b:78:11:d3:5a:f1:b9:b2:cf:a1:
3f:60:79:35:17:6f:be:6f:61:4c:0c:59:81:40:6a:6a:c6:04:
f0:75:0f:b8:5c:45:bf:ff:0f:53:7d:33:56:c9:1b:44:dd:eb:
18:57:6e:00:c7:93:50:a4:40:cd:cd:8a:7e:11:f1:a2:d2:82:
05:cb:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:45:41 2025 by rpki-client